Cyber Deception Techniques and an Adversary Engagement Platform for Cybersecurity Enhancement
Open AccessThe rapid advancement and increased sophistication of digital networks and devices within society have contributed to the elevation of the risk of cyberattacks from malicious attackers seeking to explore and exploit system vulnerabilities. Solar Winds develops and installs software that allows organizations to manage networks, systems, and information technology infrastructure effectively. Intrusion Detection Systems (IDSs) and the Active Deception Framework (ADF) are the primary ways of detecting unauthorized intrusions in information and network systems. This study consisted of two broad parts. Firstly, the study examined a breach of Solar Winds security in which attackers implemented a back door by injecting malicious code into the network operating system, despite the existence of a preinstalled IDS. Secondly, the study tested the effectiveness of an ADF and evaluated whether it offered better security against various attacks compared to the unenhanced ADF system and a reactive non-ADF system. It was hypothesized that a hybrid model integrating target defense (MTD) and cyber deception techniques offers a potential framework for addressing cyberattacks perpetuated through back doors in Solar Winds. The findings showed that the hybrid solution significantly reduced the mean time to detection of attacks by malicious actors seeking system access through back doors. ADF evaluation results showed that the enhanced ADF system was more effective than the unenhanced and non-ADF systems. The enhanced ADF reduced the mean detection time by 1.5 min (50%) and increased the time needed for an adversary to attack by 20 min (125%) compared to the reactive solution. The enhanced ADF system also detected more than 90% of attackers’ movements in the attack chain and revealed the cyberattack techniques and procedures with 60% accuracy. The enhanced ADF is a promising system for organizations that operate in high-risk industries like software developers.
- All rights reserved
Notice to Authors
If you are the author of this work and you have any questions about the information on this page, please use the Contact form to get in touch with us.